sx8thy3won.kokenkoken.com
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of sx8thy3won.kokenkoken.com
This URL is a subdomain of kokenkoken.com rather than a clearly branded standalone website. The specific host name, "sx8thy3won," appears randomly generated, and the captured page shows only a minimal "Page not found" message with no title, description, company details, or visible site content. Based on the available page data, it does not appear to function as a normal public-facing website at the time of this scan.
The domain itself has been registered for many years, but that age applies to the parent domain and does not necessarily establish trust for every subdomain created under it. In practice, subdomains can be created and repurposed independently, so this host may be temporary, inactive, or used for a specific backend or campaign-related purpose that is not visible from the screenshot.
Multiple web-classification sources associated this URL with phishing-related activity, which suggests it may have been used in a deceptive context rather than as a conventional content site. Because the visible page is effectively empty, there is limited direct evidence about its intended operator or legitimate business purpose based on the page itself.
Safety Assessment for sx8thy3won.kokenkoken.com
Several security signals indicate elevated risk for this URL at the time of the scan. It was flagged by 6 out of 91 security engines, with multiple detections describing phishing or other fraudulent behavior, and independent web-classification data also labeled it as phishing-related. Although the visible page currently shows only a "Page not found" message, that does not rule out prior abuse, selective delivery, or short-lived phishing content on the same subdomain.
The malware scan did not detect malicious files in the limited content that was available, and major content-focused threat databases in the provided results were clean at the time of this scan. However, the domain's IP address was listed on one mail-reputation blocklist, which is a weaker signal than direct phishing detections but still adds some caution. The combination of multiple phishing-related engine flags, a very low trust score, and the lack of normal site content weighs more heavily than the clean file scan here.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The host uses a valid SSL/TLS certificate issued by a mainstream certificate authority, with expiry shown in late 2026. Traffic is routed through Cloudflare infrastructure, and the resolved server IP is associated with Cloudflare in Toronto, Canada. The nameservers also point to Cloudflare, indicating the site is using a reverse-proxy/CDN setup rather than exposing its origin directly.
DNSSEC appears to be unsigned, which is not uncommon but means DNS responses do not benefit from DNSSEC validation. No malicious files, external links, or iframes were identified in the limited page content that was scanned, but the page itself was essentially empty and returned a minimal "Page not found" response, which limits the depth of technical inspection.
Share your experience with this website. Was it safe? Did you encounter any issues?